Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.59%Mar 20, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.49%Mar 20, 2026
- Medium4.3Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.28%Mar 20, 2026
- High7.4Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript applications.Check if you run itEPSS 0.28%Mar 20, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.41%Mar 20, 2026
- High8.1OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium4.3Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Check if you run itEPSS 0.28%Mar 20, 2026
- Medium5.1XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arb…Check if you run itEPSS 0.34%Mar 20, 2026
- Medium6.5File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.24%Mar 20, 2026
- High8.6Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce authenticated users to submit crafted requests to a pr…Check if you run itEPSS 0.31%Mar 20, 2026
- Medium5.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.48%Mar 20, 2026
- Medium5.4An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.22%Mar 20, 2026
- Medium4.3Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation.Check if you run itEPSS 0.40%Mar 20, 2026
- Medium5.3ZITADEL is an open source identity management platform.Check if you run itEPSS 0.52%Mar 20, 2026
- Critical9.1H3 is a minimal H(TTP) framework.Check if you run itEPSS 0.46%Mar 20, 2026
- Low3.7PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.33%Mar 20, 2026
- High7.1Cross-Site request forgery (CSRF) vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a through 5.0.4.Check if you run itEPSS 0.12%Mar 20, 2026
- High8.7Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.42%Mar 20, 2026
- Critical9.4FastGPT is an AI Agent building platform.Check if you run itEPSS 0.33%Mar 20, 2026
- High7.5Qwik is a performance-focused JavaScript framework.Check if you run itEPSS 0.59%Mar 20, 2026
- High8.7Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.60%Mar 20, 2026
- Medium6.9Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.44%Mar 20, 2026
- High8.7Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.81%Mar 20, 2026
- Medium5.7CKAN MCP Server is a tool for querying CKAN open data portals.Check if you run itEPSS 0.31%Mar 20, 2026
- Critical9.8Mesop is a Python-based UI framework that allows users to build web applications.Patch nowKEVEPSS 4.11%Mar 20, 2026